CVE-2021-20314: Buffer Overflow
Last updated 24 July 2024
Other sources
Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-20314?
CVE-2021-20314 is a stack buffer overflow vulnerability in libspf2 versions below 1.2.11 that can lead to denial of service and potentially code execution.
What is the severity of CVE-2021-20314?
CVE-2021-20314 has a severity rating of 9.8 (Critical).
Which software versions are affected by CVE-2021-20314?
Libspf2 versions below 1.2.11, Redhat Enterprise Linux 7.0, and Fedoraproject Fedora 33, 34, and 35 are affected.
How can CVE-2021-20314 be exploited?
CVE-2021-20314 can be exploited by processing certain SPF macros in malicious crafted SPF explanation messages.
Are there any references to learn more about CVE-2021-20314?
Yes, you can find more information on CVE-2021-20314 at the following references: [Bugzilla Redhat](https://bugzilla.redhat.com/show_bug.cgi?id=1993070), [Fedoraproject Fedora 33](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMSFT2NJDZ7PATRZSQPAOGSE7JD6ELOB/), [Fedoraproject Fedora 34](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFXJRHPE5OSCPTNA3ZZ4ORDHT4JQH3Y4/).